DigiCert UltraDNS Sinkholed
VerdictMalicious
Severitymedium
WEBSITE ANALYSIS REPORT
http://zetmoon.live/
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- http://zetmoon.live/
- Submitted IP / ASN
104.21.20.254 AS13335 · Cloudflare, Inc.
- Final URL
- https://zetmoon.live/
- Final IP / ASN
- 172.67.195.65 AS13335 · CLOUDFLARENET
Final page
- Page title
- ZetMoon
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 283.3 KB (290101 bytes)
Detections
Activity
- HTTP requests
- 52
- Observed hosts
- 13
- Script records
- 44
Estimated HTTP data
- Sent
- ~26.7 KB
- Received
- ~1.31 MB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| fonts.gstatic.com | N/A | 2008-02-11 | 2014-04-02 | 2026-09-20 | 555 B | 35.5 KB |  172.217.19.227 | |
| c.adsco.re | 100769 | 2017-02-14 | 2017-11-29 | 2026-09-21 | 438 B | 96.9 KB | 104.16.84.77 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| zetmoon.live 16 alerts | N/A | N/A | 2026-05-24 | 2026-07-02 | 7.2 KB | 898.4 KB | 172.67.195.65 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| image.tmdb.org | 53077 | 2009-09-15 | 2021-01-09 | 2026-09-26 | 11.6 KB | 266.8 KB |  169.150.247.40 | Bunny CDN Not recorded |
| leaf.yesemal486.workers.dev | N/A | N/A | 2026-05-24 | 2026-05-24 | 481 B | 915 B | 104.21.65.146 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| www.premiumvertising.com | 874532 | 2020-04-18 | 2020-04-18 | 2026-09-20 | 471 B | 41.9 KB |  185.76.9.27 | CDN77 CDN CDN77 is a content delivery network (CDN). |
| xhe8bo4ftu4m.n4.adsco.re | N/A | N/A | N/A | N/A | 473 B | 156 B | 38.132.109.126 | |
| 6.adsco.re | 91627 | 2017-02-14 | 2018-01-15 | 2026-09-26 | 813 B | 987 B | 104.16.83.77 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| adsco.re | 3069 | 2017-02-14 | 2017-04-03 | 2026-09-19 | 1.3 KB | 2.4 KB | 162.252.214.7 | |
| xhe8bo4ftu4m.l4.adsco.re | N/A | N/A | N/A | N/A | 473 B | 156 B |  185.200.118.62 | |
| xhe8bo4ftu4m.s4.adsco.re | N/A | N/A | N/A | N/A | 473 B | 156 B |  185.200.116.60 | |
| 4.adsco.re | 95532 | 2017-02-14 | 2021-01-04 | 2026-09-19 | 813 B | 0 B | Not recorded | |
| premiumvertising.com | 64798 | 2020-04-18 | 2020-04-19 | 2026-09-16 | 1.7 KB | 263 B | 162.252.214.11 |